
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft
File: aHvrJ3oFne_qK-3WevsbgjiOXrE.mft (raw, json)
Hash identifier: 95u2bwA82qTVKxLoqH4WGUkM8ozQfBw5YOkxy9ZGQV8=
Subject key identifier: B8:7D:DD:CD:5E:59:2E:E9:F6:23:32:C6:E8:FD:D9:FC:D6:F5:FA:3C
Authority key identifier: 68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1
Certificate issuer: /CN=A9165FAD/serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1
Certificate serial: 08DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft
Manifest number: 08C2
Signing time: Wed 28 Oct 2026 20:51:43 +0000
Manifest this update: Wed 28 Oct 2026 20:51:43 +0000
Manifest next update: Wed 04 Nov 2026 20:51:43 +0000
Files and hashes: 1: aHvrJ3oFne_qK-3WevsbgjiOXrE.crl (hash: 6TEMEP1V2/r/n0q5WJRctfGawxZ9CVyQ4O00ft/tiK0=)
2: D5775FF4E54F11F0875E48B9366F56BC.roa (hash: dBaY0JbbVzl8W6CAtYQ8b8Su4AnGzP3sLeHSsKnDsdA=)
3: 0ED6FD58E4AC11F09CFF02084D6F56BC.roa (hash: c00S8PMH6seb894IcBTA4+jGD8At/7O3wWr5RItqF8c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl
rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 20:51:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2271 (0x8df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165FAD, serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1
Validity
Not Before: Oct 28 20:51:43 2026 GMT
Not After : Nov 4 20:51:43 2026 GMT
Subject: CN=6ae2605f-4429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3c:2c:6d:6f:94:01:14:1f:9f:6b:1f:95:6d:
08:9b:94:17:3a:83:b9:15:65:be:82:6f:54:a7:fe:
34:1d:58:10:93:27:1a:ea:fa:9a:c0:9f:35:8e:cf:
d5:b6:8e:ab:aa:7c:4d:33:d2:f5:a5:03:ec:8d:f0:
20:79:8d:78:a8:65:69:7d:0f:46:69:5f:01:35:45:
0f:06:f7:ae:04:69:86:9d:34:24:c7:f8:01:95:6a:
42:7a:4e:66:77:77:bf:13:1f:38:d9:71:df:27:f2:
27:59:c0:9f:85:45:21:76:70:42:ef:0d:98:13:86:
ac:53:d3:48:91:46:bd:d0:96:54:b6:23:5b:4e:8e:
70:e8:81:cd:9f:b8:10:89:c3:2e:0f:56:99:e4:2d:
44:f8:d5:3f:2d:be:9c:19:e3:8c:88:62:6a:93:23:
e0:24:38:30:c4:b6:25:b4:d3:ac:89:8a:57:f5:ed:
56:50:28:34:5c:dd:ec:ff:5f:f7:f4:c4:c2:66:e2:
87:6f:8f:4e:f0:30:ac:fe:07:99:bc:40:4a:9e:bd:
53:74:f4:fe:52:39:6c:80:aa:5b:0a:ab:b1:74:53:
9c:61:1c:ec:e2:cf:a5:6d:dc:c4:63:40:f1:af:a9:
af:eb:68:5f:3f:97:4a:7b:eb:bf:42:d7:af:69:01:
de:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7D:DD:CD:5E:59:2E:E9:F6:23:32:C6:E8:FD:D9:FC:D6:F5:FA:3C
X509v3 Authority Key Identifier:
keyid:68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:62:7d:1b:c6:5b:bd:0e:11:b6:f9:c9:79:42:7c:47:07:64:
81:6b:08:49:a5:8a:e8:54:2c:25:ee:17:4a:c6:9a:47:79:9c:
f1:b3:0a:e0:d2:a7:62:a3:2c:5d:32:1e:f2:b4:24:7f:90:a8:
14:7b:48:c7:04:04:3a:e4:fa:25:17:86:28:ee:ea:37:c5:7f:
25:bd:ec:ed:90:de:2c:13:21:13:0d:f9:93:14:bf:02:f8:6e:
f9:d3:99:db:00:16:6d:8d:a8:2b:01:1e:98:9c:f9:65:25:04:
9a:ec:ad:56:45:f9:23:36:86:4f:21:02:f0:3d:1a:9d:d5:51:
ba:e5:ac:17:13:84:68:11:b1:37:bd:14:c0:d3:8b:81:6b:01:
d7:05:84:bb:7d:8a:28:d2:4f:55:6a:6e:7a:88:73:0e:9e:6f:
d2:8a:58:12:af:4b:13:31:1b:c3:b9:44:89:e5:ef:c0:f1:6b:
31:b6:c1:d2:51:6f:55:ae:3f:3a:c8:61:18:b0:7f:cf:fa:a7:
3d:53:e2:c6:51:be:84:ad:e4:16:d6:34:1f:5a:76:28:5d:ae:
06:93:bb:f1:81:8b:a4:48:da:40:28:ef:3b:8d:bc:c2:56:cc:
30:2f:a8:b6:bf:c2:81:07:40:65:08:bb:33:63:8f:21:18:64:
84:7c:0b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:06:55 2026 by rpki-client